Summary of the invention
For making up above-mentioned deficiency, the present invention proposes a kind of terminal device, and described terminal device comprises encryption chip and terminal body;
Described terminal body gathers user biological information and user's private information;
Described encryption chip to described user's private information with described biometric information for key is encrypted by cryptographic algorithm, and by encryption after information send to terminal body to store.
Further, when user needs to decipher its user's private information, again can input identical user biological information, encryption chip decrypts user's private information with this user biological information for enciphered message described in secret key decryption.
Further, described encryption chip comprises terminal screen control module, enciphering algorithm module, the module communicated with terminal master chip, input control module and biometric information load module;
Described terminal screen control module is for outputting to terminal display screen by private information;
Described enciphering algorithm module is used for encrypting user's private information;
The described module communicated with terminal master chip is for communicating with terminal master chip;
Described input control module is used for control information input and the input of the information of reception;
Described biometric information load module is for gathering biological information and identifying biological information.
Further, described cryptographic algorithm is one or the combination of AES, DES, RSA, MD5.
Further, described user biological information be finger print information, iris information, facial information, venous information, ear line information one or combination.
The present invention proposes a kind of user profile encryption method, and described encryption method comprises: user terminal main body gathers user biological information and user's private information; By encryption chip to described user's private information with described biometric information for key adopt cryptographic algorithm encryption, and by encryption after information send to terminal body to store.
Further, when user needs to decipher its user's private information, again can input identical user biological information, encryption chip is using this user biological information as enciphered message described in secret key decryption and decrypt user's private information.
Further, described encryption chip comprises terminal screen control module, enciphering algorithm module, the module communicated with terminal master chip, input control module and biometric information load module;
Described terminal screen control module is for outputting to terminal display screen by private information;
Described enciphering algorithm module is used for encrypting user's private information;
The described communication module with terminal chip is used for communicating with terminal master chip;
Described input control module is used for control information input and input of receiving information;
Described biometric information load module is for gathering biological information and identifying biological information.
Further, described cryptographic algorithm is one or the combination of AES, DES, RSA, MD5.
Further, described user biological information be finger print information, iris information, facial information, venous information, ear line information one or combination.
In sum, the present invention is adopted to have following beneficial effect:
Adopt the hardware solution of encryption chip, speed and performance are all better than software approach; Adopt biological identification technology, do not need user to remember any password; All encryptions, deciphering, display, all completing in encryption chip inside of the operating process such as input, does not need by mobile phone, avoids the information leakage that in mobile phone, virus or wooden horse cause.
Embodiment
The present invention overcomes the encryption and decryption process existed in prior art and depends on running software in mobile phone, if the implanted virus of the mobile phone of user and trojan horse program, just can monitor the information in user mobile phone internal memory, steal password (key) or the rear password exported of deciphering of user's input, cause great property economic loss to user.
The present invention comprises encryption chip and terminal body two parts.The built-in cryptographic algorithm of encryption chip can be one or the combination of the multiple encryption method such as AES (Advanced Encryption Standard), DES (Data Encryption Standard), RSA (Rivest Shamir and Adleman), MD5 (Message Digest Algorithm), and the present invention is just described for AES128 algorithm.
The key of AES encryption algorithm is that biometric information identification module is extracted, and forms with user identity the one section of condition code uniquely identified.Should be noted that the biological information recognition method that biometric information identification module adopts can be the one of the multiple methods such as fingerprint recognition, iris recognition, face recognition, hand vein recognition, the identification of ear line or combine, the present invention is just described for fingerprint recognition.
Encryption chip is realized by FPGA at present, comprises five modules: mobile phone screen control module, AES encryption algoritic module, the module communicated with mobile phone master chip, keyboard control module and biometric information load module.
AES encryption algorithm is realized by the hardware circuit of FPGA inside programming, and the key of AES encryption algorithm is unique biometric information that user inputs.In order to without handpiece portion, so user inputs biometric information be input to encryption chip inside, equally for security reasons, the password exported after deciphering does not need through mobile phone primary control program yet, is directly outputted on mobile phone display screen by the mobile phone screen control module in encryption chip.
Below in conjunction with the drawings and specific embodiments, technical solution of the present invention is described in further detail.Below in embodiment, terminal device of the present invention is described for mobile phone.
As shown in Figure 1, embodiment of the present invention terminal device structural representation, described terminal device is made up of mobile phone body and encryption chip two parts, wherein display screen and keyboard belong to mobile phone body part, be exactly the display screen and keyboard that usually adopt, be connected to mobile phone master chip by corresponding signal wire via encryption chip, during normal work, encryption chip is equivalent to path effect, can not impact the normal input of mobile phone and display.Mobile phone master chip carries out message exchange by communication interface and encryption chip.
Encryption chip is realized by FPGA at present, comprises five modules: mobile phone screen control module, AES encryption algoritic module, with the communication module of mobile phone master chip, keyboard control module and biometric information load module.
Described mobile phone screen control module is for outputting to mobile phone display screen by output password.
Described AES encryption algoritic module is used for encrypting user profile.
The described communication module with mobile phone master chip is used for communicating with mobile phone master chip.
Described keyboard control module is used for supervisory keyboard input and accepts input through keyboard.
Described biometric information load module is for gathering biological information and identifying biological information.
Please refer to shown in Fig. 2, be embodiment of the present invention user profile encryption method process flow diagram, it comprises the steps:
S201: first point out user's input to need the managing detailed catalogue setting up password;
Such as user needs the encrypted message setting up China Merchants Bank's card, input " China Merchants Bank's card ".
S202: mobile phone enters encrypted state by communication interface notice encryption chip, and points out user to input unique password (key);
S203: encryption chip disconnects the connection of mobile phone and keyboard;
S204: user inputs biometric information, such as finger print information;
S205: encryption chip sends information to mobile phone master chip, notice mobile phone display screen display reminding user inputs password;
S206: the password that user inputs is encrypted by encryption chip;
S207: the information after encryption sends to chip for cell phone and managing detailed catalogue one_to_one corresponding to store.
In above-mentioned steps, mobile phone prompting user carries out the input service of fingerprint identification information, simultaneously encryption chip cuts off the connection of the input medias such as keyboard and mobile phone, and the communication of usual keyboard and master chip at this moment user can input corresponding password, and the password of usual bank card is 6 bit digital.Bits per inch word take up room be a byte (8 bit) complete input rear 6 numerals be just stored in encryption chip inside, need user to input twice, Password Input for confirmation is errorless.6 numerals occupy the space of 48 bits, and AES encryption algorithm needs at least to input 128 Bit datas, so want to be encrypted the data of 48 bits, need to fill code data.The mode of filling is chosen as complete zero or the good mode of miscellaneous stipulations.Usual all kinds of password takes up room and is all less than 16 bytes (128 bit), so the present invention only needs to carry out aes algorithm can complete ciphering process to a password.Data after encryption are sent to mobile phone by communication interface by encryption chip, and store with encrypted message " China Merchants Bank blocks " one_to_one corresponding that user inputs.It should be noted that if user needs the Cipher Processing mode of input alphabet numeral mixing, first it should be noted that the input pattern that mobile phone is given tacit consent to is digital form, at this moment mobile phone needs to notify encryption chip by communication interface, if press certain key of lower keyboard, then input pattern switches to alphabetic mode; Then the information of encryption chip to input through keyboard judges, if switch key is typed to, then encryption chip does not tackle input through keyboard, ensures that input mode switches to alphabetic mode, if other buttons are transfused to, encryption chip intercepts corresponding input information, and preserves.Letter or digital by what differentiate that the method for switch key can control encryption chip identification user input, and the information of its correspondence is kept in encryption chip, after each successfully input password, encryption chip all can pass through communication interface, and prompting mobile telephone set display Ying Jing have input how many passwords.After user completes Password Input, then send to mobile phone after aes algorithm encryption.
Please refer to shown in Fig. 3, be embodiment of the present invention user profile decryption method process flow diagram, it comprises the steps:
S301: mobile phone prompting user selects the managing detailed catalogue needing password for inquiry;
S302: the enciphered message corresponding with managing detailed catalogue is sent to encryption chip by communication interface by mobile phone, and notify that it enters decrypted state, and point out user to input unique password (key);
S303: user inputs biometric information;
S304: the key that encryption chip utilizes user to input and the enciphered message that mobile phone sends are decrypted operation;
S305: encryption chip disconnects the connection of mobile phone and screen;
S306: the password after deciphering is shown to mobile phone screen by encryption chip.
In above-mentioned flow process, first user is needed to select to need the managing detailed catalogue of output password, then the enciphered message corresponding with user-selected managing detailed catalogue is sent to encryption chip by communication interface, input fingerprint identification information by mobile phone display screen prompting user simultaneously, after the fingerprint identification information receiving user's input, encryption chip is decrypted (key is the fingerprint identification information that user inputs) the enciphered message inputted from mobile phone.And interrupt mobile phone display screen and be connected with the electric signal of mobile phone, take over the control to mobile phone display screen by encryption chip, the password after deciphering is shown on mobile phone display screen.Can be arranged through displaying time, after such as showing 1 minute, encryption chip exits the control to display screen, and empties corresponding stored password reservoir expressly, turns back to and again receives the state that mobile phone sends enciphered message.During display decodement, because original password may because figure place is not enough through filling process, needing user to judge if there is continuous print zero and the partial password cleartext information finished up with zero, is not the encrypted message that user inputs.
It should be noted that previous exemplary illustrates is all for the mobile phone inputted with full keyboard, if user uses touch screen mobile phone, the then connection of the similar keyboard of the connection of touch screen and mobile phone and mobile phone, realize principle also similar, the data of encryption chip to touch screen are only needed to resolve, if press certain region of touch screen, then input pattern switches to alphabetic mode; Encryption chip is by judging the touch screen area information of input, if switch key region is triggered, then encryption chip does not tackle input through keyboard, ensures that input mode switches to alphabetic mode, if other buttons are transfused to, encryption chip intercepts corresponding input information, and preserves.Be letter or digital by what differentiate that the method for switch key toggle area can control encryption chip identification user input, and the information of its correspondence is kept in encryption chip, after completing Password Input, then send to mobile phone after aes algorithm encryption.
This design proposal comprehensively uses fingerprint identification technology, AES encryption algorithm provides very high safety standard, encrypting and decrypting process depends on hardware encryption chip and realizes, do not undertaken by cell phone software, ensure that all encrypted messages expressly do not enter mobile phone EMS memory or associated external memory, the trojan horse program can not implanted by mobile phone or virus are stolen.
The present invention also can have numerous embodiments; do not deviating from the situation of the present invention's spirit and essence thereof; those of ordinary skill in the art can make various corresponding change or change according to the present invention certainly; in every case done within the spirit and principles in the present invention any amendment, equivalent replacement, improvement, all should be included within protection scope of the present invention.